From 3b48e304639623ba3d48f54813fb26a83e25775a Mon Sep 17 00:00:00 2001
From: Anish Lakhwara <anish+git@lakhwara.com>
Date: Fri, 23 Sep 2022 18:11:14 +1000
Subject: [PATCH] move acme to server config

---
 profiles/server/default.nix | 2 +-
 profiles/site/default.nix   | 2 --
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/profiles/server/default.nix b/profiles/server/default.nix
index 5fc374f7..d3a55dda 100644
--- a/profiles/server/default.nix
+++ b/profiles/server/default.nix
@@ -5,7 +5,7 @@
     passwordAuthentication = false;
     permitRootLogin = "no";
   };
-  networking.firewall.allowedTCPPorts = [ 80 433 22 ]; # ssh and website
+  networking.firewall.allowedTCPPorts = [ 80 443 22 ]; # ssh and website
   security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
 
   security.acme.defaults.email = "anish+acme@lakhwara.com";
diff --git a/profiles/site/default.nix b/profiles/site/default.nix
index 7f16ca1a..50a6aad5 100644
--- a/profiles/site/default.nix
+++ b/profiles/site/default.nix
@@ -2,6 +2,4 @@
 {
   services."anish.lakhwara.com".enable = true;
   services."anish.lakhwara.com".enableSSL = true;
-  security.acme.email = "anish+acme@lakhwara.com";
-  security.acme.acceptTerms = true;
 }